Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/fb7e67-5425-4c4f-b46a-8243aef6fe5a/1/TO9yaxWyrVivXtK2jROgIUKfquo.roa
File: TO9yaxWyrVivXtK2jROgIUKfquo.roa (raw, json)
Hash identifier: 3tUtXRpfp4dJE5QMDSJVNx8TAKQgBZnQqtPs36Kt+8M=
Subject key identifier: 4C:EF:72:6B:15:B2:AD:58:AF:5E:D2:B6:8D:13:A0:21:42:9F:AA:EA
Certificate issuer: /CN=aa70110d30d52e8a6969588b3f621416bcdf644b
Certificate serial: 018CC9BBA98FF0AB8ADE875A0B7877177ACC
Authority key identifier: AA:70:11:0D:30:D5:2E:8A:69:69:58:8B:3F:62:14:16:BC:DF:64:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qnARDTDVLoppaViLP2IUFrzfZEs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/fb7e67-5425-4c4f-b46a-8243aef6fe5a/1/TO9yaxWyrVivXtK2jROgIUKfquo.roa
Signing time: Tue 02 Jan 2024 10:32:48 +0000
ROA not before: Tue 02 Jan 2024 10:32:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 57227
IP address blocks: 185.110.44.0/22 maxlen: 22
81.163.63.0/24 maxlen: 24
176.120.192.0/19 maxlen: 19
81.24.85.0/24 maxlen: 24
81.24.88.0/21 maxlen: 21
81.163.32.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/fb7e67-5425-4c4f-b46a-8243aef6fe5a/1/qnARDTDVLoppaViLP2IUFrzfZEs.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/fb7e67-5425-4c4f-b46a-8243aef6fe5a/1/qnARDTDVLoppaViLP2IUFrzfZEs.mft
rsync://rpki.ripe.net/repository/DEFAULT/qnARDTDVLoppaViLP2IUFrzfZEs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 21:03:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bb:a9:8f:f0:ab:8a:de:87:5a:0b:78:77:17:7a:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa70110d30d52e8a6969588b3f621416bcdf644b
Validity
Not Before: Jan 2 10:32:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4cef726b15b2ad58af5ed2b68d13a021429faaea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:fe:2d:3b:5b:d9:29:48:fd:9f:42:e6:f1:72:
d2:3f:f0:d1:c4:bd:5a:74:69:15:86:4a:44:cd:ac:
80:94:a0:15:ef:c9:1c:b2:eb:a8:33:0c:bc:0a:72:
53:83:aa:4f:39:40:ac:b6:87:56:1a:bd:05:15:f5:
29:e2:07:2d:a6:71:bd:1d:42:cb:3c:ba:be:71:2f:
28:1f:dc:41:54:1a:b3:82:b9:ab:b1:da:50:03:f8:
aa:d3:81:03:c1:9e:b7:4a:38:41:2e:ff:93:67:c4:
4a:25:dd:cd:bb:1b:44:e4:e5:22:0d:55:df:07:24:
a2:20:84:5a:ff:df:48:d7:d2:a1:3e:04:80:5a:5c:
f4:44:7a:75:c8:09:b3:58:11:16:b7:35:9b:97:a7:
af:7a:66:1e:fb:b2:7a:ea:d6:ba:37:28:c7:76:75:
5a:88:cf:59:a5:f6:f4:13:9a:c3:39:af:58:c7:5d:
64:fc:ac:fb:0e:34:93:5a:d6:c3:18:28:21:28:63:
7e:d0:3d:09:dc:83:e5:cc:b3:7b:c2:29:9b:f0:3e:
aa:0d:6d:aa:2c:12:5a:90:ad:e3:ec:d7:86:15:b3:
ce:68:97:d5:a6:64:ea:d4:a2:97:60:19:2e:1c:b7:
e9:b8:26:8d:34:9b:0a:59:e7:57:03:cd:2e:be:de:
d2:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:EF:72:6B:15:B2:AD:58:AF:5E:D2:B6:8D:13:A0:21:42:9F:AA:EA
X509v3 Authority Key Identifier:
keyid:AA:70:11:0D:30:D5:2E:8A:69:69:58:8B:3F:62:14:16:BC:DF:64:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qnARDTDVLoppaViLP2IUFrzfZEs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/fb7e67-5425-4c4f-b46a-8243aef6fe5a/1/TO9yaxWyrVivXtK2jROgIUKfquo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/fb7e67-5425-4c4f-b46a-8243aef6fe5a/1/qnARDTDVLoppaViLP2IUFrzfZEs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.24.85.0/24
81.24.88.0/21
81.163.32.0/19
176.120.192.0/19
185.110.44.0/22
Signature Algorithm: sha256WithRSAEncryption
08:f1:3c:ae:d1:89:38:db:3e:db:23:83:7d:d0:d4:08:95:b9:
fd:30:7c:42:3c:1e:a4:a6:89:f1:c7:f0:32:a9:4b:f0:67:4d:
42:b7:04:1c:58:2a:10:ca:91:fe:b1:42:eb:fb:bf:49:43:ec:
a8:33:04:29:51:aa:60:3d:7a:b2:ef:7a:a0:6c:71:e1:b2:06:
dd:38:ca:a9:05:ee:dd:63:4b:aa:7d:c5:62:ea:37:fc:90:77:
3b:03:e1:8d:bb:d4:5d:a2:05:26:11:89:27:83:59:10:29:64:
6c:8c:78:13:b6:dc:41:33:68:1d:57:8e:72:2f:4e:f7:42:af:
bb:09:19:56:a1:ff:e1:cf:aa:44:b3:51:83:66:32:2b:08:a3:
35:be:fe:bd:0e:a7:1c:e3:28:f9:7d:6f:d3:5b:a4:f3:b9:7e:
cd:db:67:65:6c:0e:eb:b6:5b:30:21:9b:8d:bf:eb:59:16:7a:
bf:47:b6:f3:9c:22:9d:61:42:e3:cf:56:11:a9:13:00:b6:48:
40:22:ad:2f:4d:d0:78:71:40:bf:df:d6:e0:1e:87:71:4a:e5:
21:7a:e3:97:69:02:7f:e9:f2:5d:20:84:47:6b:63:5a:f6:47:
d1:e5:6b:f5:7a:e5:e1:a5:a6:b0:e3:10:e2:df:fe:68:c3:12:
9c:1c:6e:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 01:18:02 2024 by rpki-client on console-ams.rpki-client.org